41/100 (Medium)

OpenClaw： suspicious
VirusTotal： suspicious
StaticScan： unknown

OpenClaw： suspicious

The skill appears to do what it claims (call 途牛 MCP via curl to search and book hotels) but there are metadata inconsistencies and it will send users' personal data to an external service — confirm th...

[内容已截断]

VirusTotal： suspicious VT 报告

静态扫描： unknown

README 未提供

{
    "latestVersion": {
        "_creationTime": 1772246055434,
        "_id": "k9718ybt4xnfcq2e19rbhwp0t1820h3t",
        "changelog": "Version 1.0.3\n\n- 增加了对运行环境（需提供 curl）的显式说明\n- 明确列出必需环境变量（TUNIU_API_KEY）和所需二进制（curl）于元数据\n- 新增“隐私与个人信息说明”，提醒用户预订动作会发送联系人姓名、手机号等至途牛远端服务\n- 补充了使用时的隐私注意事项，建议勿在日志或回复中暴露个人信息\n- 其它文档结构性优化，无功能变更",
        "changelogSource": "user",
        "createdAt": 1772246055434,
        "parsed": {
            "clawdis": {
                "emoji": "🏨",
                "requires": {
                    "bins": [
                        "curl"
                    ]
                }
            }
        },
        "version": "1.0.3"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Leonardoooooo",
        "handle": "leonardoooooo",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/2190878?v=4",
        "kind": "user",
        "linkedUserId": "kn7bc8chgvfzqsf2s965yfwd4580pdvz"
    },
    "ownerHandle": "leonardoooooo",
    "skill": {
        "_creationTime": 1770806756923,
        "_id": "kd772er8cvac228br3kkgs3xgx80ymqw",
        "badges": [],
        "createdAt": 1770806756923,
        "displayName": "途牛酒店预订技能",
        "latestVersionId": "k9718ybt4xnfcq2e19rbhwp0t1820h3t",
        "ownerUserId": "kn7bc8chgvfzqsf2s965yfwd4580pdvz",
        "slug": "hotelclaw",
        "stats": {
            "comments": 0,
            "downloads": 997,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 2,
            "versions": 4
        },
        "summary": "途牛酒店助手 - 通过 exec + curl 调用 MCP 实现酒店搜索、详情查询、预订下单。适用于用户询问某地酒店、入住日期、查看酒店详情或提交订单时使用。",
        "tags": {
            "latest": "k9718ybt4xnfcq2e19rbhwp0t1820h3t"
        },
        "updatedAt": 1774324100696
    }
}